Hey guys, I am trying to implement and block full bogon lists. the problem I am currently having is that adding the full ipv6 list fills the firewall group up before it finishes. I believe the exact error was "hash full". Does anyone know anyway around this. Here is the script i made to automate the bogon list
bogon.sh
#! /bin/bash clear diffr=$(diff /config/bogons/bogonsv4.txt <(curl -s http://www.team-cymru.org/Services/Bogons/fullbogons-ipv4.txt)) if [ "$diffr" ]; then echo "Removing old list" [ -f /config/bogons/bogonsv4.txt] || rm /config/bogons/bogonsv4.txt # [ -f /config/bogons/bogonsv6.txt] || rm /config/bogons/bogonsv6.txt echo "Updating list from Team Cymru" curl -o /config/bogons/bogonsv4.txt http://www.team-cymru.org/Services/Bogons/fullbogons-ipv4.txt # curl -o /config/bogons/bogonsv6.txt http://www.team-cymru.org/Services/Bogons/fullbogons-ipv6.txt echo "clearing old bogon tables" /sbin/ipset flush bogonsv4 # /sbin/ipset flush bogonsv6 echo "Updating bogons IPv4" while read -r ipv4 rest; do /sbin/ipset add bogonsv4 $ipv4; done < <(grep -v '^#' /config/bogons/bogonsv4.txt) # echo "Updating bogons IPv6" # ewhile read -r ipv6 rest; do /sbin/ipset add bogonsv6 $ipv6; done < <(grep -v '^#' /config/bogons/bogonsv6.txt) echo "DONE!" exit fi echo "No changes!, Script exiting" exit
that is ran under
/config/bogons/
as root
The ipv4 bogon works fine. I commented out the ipv6 stuff until I can figure out a solution.